@mergesignal/shared 0.6.0 → 0.8.0

package/dist/presentation/orchestration/scanPresentationBundle.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"scanPresentationBundle.d.ts","sourceRoot":"","sources":["../../../src/presentation/orchestration/scanPresentationBundle.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,UAAU,EACV,4BAA4B,EAC7B,MAAM,2BAA2B,CAAC;AACnC,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,6BAA6B,CAAC;AACtE,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC;AACjD,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,mCAAmC,CAAC;AAE7E,MAAM,MAAM,sBAAsB,GAAG;IACnC,UAAU,EAAE,UAAU,CAAC;IACvB,YAAY,EAAE,4BAA4B,CAAC;IAC3C,OAAO,EAAE,mBAAmB,CAAC;IAC7B;;;OAGG;IACH,KAAK,EAAE,kBAAkB,CAAC;IAC1B;;;OAGG;IACH,MAAM,EAAE,UAAU,CAAC;CACpB,CAAC"}
+{"version":3,"file":"scanPresentationBundle.d.ts","sourceRoot":"","sources":["../../../src/presentation/orchestration/scanPresentationBundle.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,UAAU,EACV,4BAA4B,EAC7B,MAAM,wBAAwB,CAAC;AAChC,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,6BAA6B,CAAC;AACtE,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC;AACjD,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,mCAAmC,CAAC;AAE7E,MAAM,MAAM,sBAAsB,GAAG;IACnC,UAAU,EAAE,UAAU,CAAC;IACvB,YAAY,EAAE,4BAA4B,CAAC;IAC3C,OAAO,EAAE,mBAAmB,CAAC;IAC7B;;;OAGG;IACH,KAAK,EAAE,kBAAkB,CAAC;IAC1B;;;OAGG;IACH,MAAM,EAAE,UAAU,CAAC;CACpB,CAAC"}

package/dist/presentation/presentation.test.js

@@ -66,7 +66,7 @@ describe("presentDashboardCard personas", () => {
         expect(card.verdict?.posture).toBe("safe");
         expect(card.headline).toMatch(/patch upgrade/i);
         expect(card.headline).not.toMatch(/needs review/i);
-        expect(card.verification.length).toBeGreaterThan(0);
+        expect(card.verification.length).toBe(0);
     });
 });
 describe("presentation parity across surfaces", () => {

package/dist/presentation/presentationPersonas.test.js

@@ -16,8 +16,6 @@ const personas = [
         density: "minimal",
         headlineMatch: /patch upgrade/i,
         headlineMustNot: /needs review/i,
-        verificationIncludes: ["CI", "typecheck"],
-        verificationMustNot: /auth flow/i,
     },
     {
         name: "eslint",
@@ -27,7 +25,6 @@ const personas = [
         density: "minimal",
         headlineMatch: /patch upgrade/i,
         headlineMustNot: /needs review/i,
-        verificationIncludes: ["ci", "lint"],
     },
     {
         name: "prettier",
@@ -37,7 +34,6 @@ const personas = [
         density: "minimal",
         headlineMatch: /patch upgrade/i,
         headlineMustNot: /needs review/i,
-        verificationIncludes: ["format"],
     },
     {
         name: "vitest",
@@ -47,7 +43,6 @@ const personas = [
         density: "minimal",
         headlineMatch: /patch upgrade|dependency upgrade/i,
         headlineMustNot: /needs review/i,
-        verificationIncludes: ["test"],
     },
     {
         name: "fastify runtime",

package/dist/presentation/profile/buildProfileFromAssessment.d.ts

@@ -1,4 +1,4 @@
-import type { Assessment, AssessmentPresentationPublic } from "../../assessmentSchema.js";
+import type { Assessment, AssessmentPresentationPublic } from "@mergesignal/contracts";
 import type { ScanResult } from "../../types.js";
 import type { PresentationProfile } from "./presentationProfile.js";
 export declare function buildProfileFromAssessment(assessment: Assessment, presentation: AssessmentPresentationPublic, result: ScanResult): PresentationProfile;

package/dist/presentation/profile/buildProfileFromAssessment.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"buildProfileFromAssessment.d.ts","sourceRoot":"","sources":["../../../src/presentation/profile/buildProfileFromAssessment.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,UAAU,EACV,4BAA4B,EAC7B,MAAM,2BAA2B,CAAC;AAEnC,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC;AAIjD,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AAwCpE,wBAAgB,0BAA0B,CACxC,UAAU,EAAE,UAAU,EACtB,YAAY,EAAE,4BAA4B,EAC1C,MAAM,EAAE,UAAU,GACjB,mBAAmB,CAuBrB"}
+{"version":3,"file":"buildProfileFromAssessment.d.ts","sourceRoot":"","sources":["../../../src/presentation/profile/buildProfileFromAssessment.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,UAAU,EACV,4BAA4B,EAC7B,MAAM,wBAAwB,CAAC;AAEhC,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC;AAIjD,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AAiDpE,wBAAgB,0BAA0B,CACxC,UAAU,EAAE,UAAU,EACtB,YAAY,EAAE,4BAA4B,EAC1C,MAAM,EAAE,UAAU,GACjB,mBAAmB,CAuBrB"}

package/dist/presentation/profile/buildProfileFromAssessment.js

@@ -1,10 +1,21 @@
-import { narrativeIntensityToDensity } from "../../assessmentSchema.js";
+import { narrativeIntensityToDensity } from "../../assessmentPresentationUtils.js";
 import { safeParseRepoIntelligence } from "../../repoIntelligenceSchema.js";
 import { scanSurfaceCopy } from "../../scanSurfaceCopy.js";
 import { collectVerificationFocus } from "../../assessmentProjection.js";
+function focalAnchorPackage(assessment) {
+    const anchors = assessment.reviewFocalPoint.anchors;
+    if (!anchors.length)
+        return null;
+    const token = anchors[0];
+    if (token === "dependency_graph")
+        return null;
+    if (token.includes("+"))
+        return token.split("+")[0];
+    return token;
+}
 function buildInterpretation(assessment, presentation, result) {
     const verificationLabels = collectVerificationFocus(result);
-    const anchorPackage = result.changedPackages?.[0] ?? null;
+    const anchorPackage = focalAnchorPackage(assessment);
     const suppressRuntimeNarrative = presentation.reachVisibility === "hidden";
     let intent = "unknown_upgrade";
     if (assessment.primaryConcern === "insufficient_evidence") {

package/dist/presentation/surfaceParity.test.js

@@ -8,14 +8,34 @@ import { renderGitHubCheckRunMarkdown } from "./render/renderGitHubCheckRunMarkd
 import { renderGitHubPrCommentMarkdown } from "./render/renderGitHubPrCommentMarkdown.js";
 import { scanResultBullmq, scanResultEslint, scanResultFastifyRuntime, scanResultMixedTypescriptFastify, scanResultPrettier, scanResultTypescriptPatch, scanResultVitest, } from "./fixtures/presentationPersonaFixtures.js";
 import { projectAssessmentFields } from "./projectAssessmentFields.js";
+import { buildNarrativeChannels } from "./compose/narrativeChannels.js";
 const SCAN_ID = "22222222-2222-4222-8222-222222222222";
 const ORIGIN = "https://app.example.com";
+const validationPersonasCore = [
+    {
+        id: "validation-pr-26",
+        name: "PR #26 mixed",
+        result: scanResultMixedTypescriptFastify,
+    },
+    {
+        id: "validation-pr-27",
+        name: "PR #27 fastify",
+        result: scanResultFastifyRuntime,
+    },
+    {
+        id: "validation-pr-28",
+        name: "PR #28 typescript",
+        result: scanResultTypescriptPatch,
+    },
+    {
+        id: "validation-pr-29",
+        name: "PR #29 prettier",
+        result: scanResultPrettier,
+    },
+    { id: "validation-pr-30", name: "PR #30 bullmq", result: scanResultBullmq },
+];
 const validationPersonas = [
-    { name: "PR #26 mixed", result: scanResultMixedTypescriptFastify },
-    { name: "PR #27 fastify", result: scanResultFastifyRuntime },
-    { name: "PR #28 typescript", result: scanResultTypescriptPatch },
-    { name: "PR #29 prettier", result: scanResultPrettier },
-    { name: "PR #30 bullmq", result: scanResultBullmq },
+    ...validationPersonasCore,
     { name: "eslint", result: scanResultEslint },
     { name: "vitest", result: scanResultVitest },
 ];
@@ -71,4 +91,52 @@ describe("surfaceParity guardrail", () => {
             expect(s.details.hero.headline).toBe(s.card.headline);
         });
     }
+    it("validation personas #26–#30: pairwise distinct reviewFocalPoint and headlines", () => {
+        const focalPoints = [];
+        const headlines = [];
+        for (const persona of validationPersonasCore) {
+            const s = surfacesFor(persona.result);
+            focalPoints.push(persona.result.assessment.reviewFocalPoint);
+            headlines.push(s.card.headline);
+            expect(s.check.title).toBe(s.card.headline);
+        }
+        for (let i = 0; i < headlines.length; i++) {
+            for (let j = i + 1; j < headlines.length; j++) {
+                expect(headlines[i]).not.toBe(headlines[j]);
+            }
+        }
+        for (let i = 0; i < focalPoints.length; i++) {
+            for (let j = i + 1; j < focalPoints.length; j++) {
+                expect(focalPoints[i]).not.toEqual(focalPoints[j]);
+            }
+        }
+    });
+    it("PR #26: headline uses focal fastify, not changedPackages[0] typescript", () => {
+        const result = scanResultMixedTypescriptFastify;
+        expect(result.changedPackages?.[0]).toBe("typescript");
+        const s = surfacesFor(result);
+        expect(s.card.headline.toLowerCase()).toContain("fastify");
+        expect(s.card.headline.toLowerCase()).not.toContain("typescript");
+    });
+    it("validation personas #28–#30: reach and verification channels differ by scope", () => {
+        const channelsById = new Map(validationPersonasCore.map((p) => {
+            const bundle = buildScanPresentationBundle({
+                result: p.result,
+                pipelineStatus: "done",
+            });
+            return [p.id, buildNarrativeChannels(bundle)];
+        }));
+        const ch28 = channelsById.get("validation-pr-28");
+        const ch29 = channelsById.get("validation-pr-29");
+        const ch27 = channelsById.get("validation-pr-27");
+        const ch30 = channelsById.get("validation-pr-30");
+        const ch26 = channelsById.get("validation-pr-26");
+        expect(ch28.reachLabel).toBeUndefined();
+        expect(ch29.reachLabel).toBeUndefined();
+        expect(ch27.verification.length).toBeGreaterThan(0);
+        expect(ch30.verification.length).toBeGreaterThan(0);
+        expect(ch27.verification).not.toEqual(ch30.verification);
+        expect(ch26.verification).not.toEqual(ch27.verification);
+        expect(ch26.scopeAreas.length).toBeGreaterThan(0);
+    });
 });

package/dist/repoIntelligenceSchema.d.ts

@@ -35,16 +35,17 @@ export declare const repoIntelligenceWireSchema: z.ZodObject<{
         }, z.core.$strip>;
         areas: z.ZodOptional<z.ZodArray<z.ZodString>>;
         dependencyClass: z.ZodOptional<z.ZodEnum<{
-            format: "format";
             unknown: "unknown";
             runtime: "runtime";
             build: "build";
             test: "test";
             tooling: "tooling";
             lint: "lint";
+            format: "format";
             ci: "ci";
         }>>;
         packageRole: z.ZodOptional<z.ZodEnum<{
+            queue: "queue";
             unknown: "unknown";
             typechecker: "typechecker";
             compiler: "compiler";
@@ -54,7 +55,6 @@ export declare const repoIntelligenceWireSchema: z.ZodObject<{
             test_runner: "test_runner";
             http_framework: "http_framework";
             auth: "auth";
-            queue: "queue";
             orm: "orm";
         }>>;
         lockfileKind: z.ZodOptional<z.ZodEnum<{
@@ -79,8 +79,8 @@ export declare const repoIntelligenceWireSchema: z.ZodObject<{
         }>>;
         evidenceStrength: z.ZodOptional<z.ZodEnum<{
             low: "low";
-            medium: "medium";
             high: "high";
+            medium: "medium";
         }>>;
         confidenceReason: z.ZodOptional<z.ZodString>;
         verificationFocus: z.ZodOptional<z.ZodArray<z.ZodString>>;

package/dist/riskSignals.d.ts

@@ -0,0 +1,19 @@
+import { type CardExposureCategory } from "./formatCardExposureDisplay.js";
+import type { ScanResult, ScoreLayer } from "./types.js";
+export type RiskSignalLayer = {
+    layer: ScoreLayer;
+    score: number;
+    exposure: CardExposureCategory;
+};
+/** Canonical exposure classification for totalScore and layerScores. */
+export type RiskSignals = {
+    riskIndex: number | null;
+    exposure: CardExposureCategory | null;
+    layers: RiskSignalLayer[];
+};
+/**
+ * Single owner for numeric risk index + exposure bucket classification.
+ * Surfaces must consume `facts.riskSignals` in future phases — do not re-derive bands.
+ */
+export declare function deriveRiskSignals(result: ScanResult): RiskSignals | null;
+//# sourceMappingURL=riskSignals.d.ts.map

package/dist/riskSignals.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"riskSignals.d.ts","sourceRoot":"","sources":["../src/riskSignals.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,KAAK,oBAAoB,EAC1B,MAAM,gCAAgC,CAAC;AACxC,OAAO,KAAK,EAAe,UAAU,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAEtE,MAAM,MAAM,eAAe,GAAG;IAC5B,KAAK,EAAE,UAAU,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,oBAAoB,CAAC;CAChC,CAAC;AAEF,wEAAwE;AACxE,MAAM,MAAM,WAAW,GAAG;IACxB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,QAAQ,EAAE,oBAAoB,GAAG,IAAI,CAAC;IACtC,MAAM,EAAE,eAAe,EAAE,CAAC;CAC3B,CAAC;AASF;;;GAGG;AACH,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,UAAU,GAAG,WAAW,GAAG,IAAI,CAwBxE"}

package/dist/riskSignals.js

@@ -0,0 +1,32 @@
+import { deriveCardExposureCategory, } from "./formatCardExposureDisplay.js";
+const LAYER_ORDER = [
+    "security",
+    "maintainability",
+    "ecosystem",
+    "upgradeImpact",
+];
+/**
+ * Single owner for numeric risk index + exposure bucket classification.
+ * Surfaces must consume `facts.riskSignals` in future phases — do not re-derive bands.
+ */
+export function deriveRiskSignals(result) {
+    const riskIndex = typeof result.totalScore === "number" && Number.isFinite(result.totalScore)
+        ? result.totalScore
+        : null;
+    const layerScores = result.layerScores;
+    if (riskIndex == null && layerScores == null) {
+        return null;
+    }
+    const exposure = deriveCardExposureCategory(riskIndex);
+    const layers = layerScores
+        ? LAYER_ORDER.map((layer) => {
+            const score = layerScores[layer];
+            return {
+                layer,
+                score,
+                exposure: deriveCardExposureCategory(score) ?? "minimal",
+            };
+        })
+        : [];
+    return { riskIndex, exposure, layers };
+}

package/dist/scanNarrativeFacts.d.ts

@@ -1,5 +1,7 @@
 import type { ObservationSignalFamily } from "./cardObservationCatalog.js";
 import type { MergePosture } from "./riskVocabulary.js";
+import type { RiskSignals } from "./riskSignals.js";
+import type { AnalysisContextWarning } from "./types.js";
 export type NarrativeAvailabilityMode = "pr_intelligence" | "insights" | "graph_fallback" | "denormalized";
 export type RuntimeSurfaceKind = "runtime" | "build" | "test" | "unknown";
 export type ReachabilityKind = "on_runtime_paths" | "build_only" | "test_only" | "unreachable" | "unknown";
@@ -20,6 +22,23 @@ export type PackageRoleKind = "typechecker" | "compiler" | "bundler" | "linter"
 export type PackageRuntimeImpact = "none" | "possible" | "confirmed" | "unknown";
 export type PackageExpectedImpact = "runtime" | "build_time" | "typecheck" | "test_time" | "development_only" | "unknown";
 export type PackageEvidenceStrength = "high" | "medium" | "low";
+export type CorpusGateReason = "ok" | "no_code_intelligence" | "repo_intelligence_invalid" | "repo_intelligence_absent";
+/** Enriched affected area with proof-chain linkage (Phase 3). */
+export type AffectedAreaFact = {
+    id: string;
+    label: string;
+    packages: string[];
+    findingIds: string[];
+    paths: string[];
+    evidenceStrength: PackageEvidenceStrength | null;
+    hotspotPackages: string[];
+    verificationFocus: string[];
+};
+export type ScanNarrativeConfidenceFacts = {
+    decision: "low" | "medium" | "high" | null;
+    assessment: "low" | "medium" | "high" | null;
+    limitedContext: boolean;
+};
 /** Engine semantic projection for one changed package (wire copy only). */
 export type ChangedPackageSemantics = {
     packageName: string;
@@ -52,6 +71,8 @@ export type ScanNarrativeFacts = {
             tier3: boolean;
         };
         repoIntelligenceParse: RepoIntelligenceParseStatus;
+        preparationWarnings: AnalysisContextWarning[];
+        corpusGateReason: CorpusGateReason;
     };
     changedPackages: {
         primary: string | null;
@@ -83,10 +104,7 @@ export type ScanNarrativeFacts = {
         changedPackageCount?: number;
         factors: string[];
     } | null;
-    affectedAreas: Array<{
-        id: string;
-        label: string;
-    }>;
+    affectedAreas: AffectedAreaFact[];
     hotspots: Array<{
         packageName: string;
         source: "code" | "graph";
@@ -103,9 +121,7 @@ export type ScanNarrativeFacts = {
         remediation?: string;
         affectedFiles?: string[];
     }>;
-    confidence: {
-        decision: "low" | "medium" | "high" | null;
-    };
+    confidence: ScanNarrativeConfidenceFacts;
     repositoryContext: Array<{
         family: ObservationSignalFamily;
         source: RepositoryContextSource;
@@ -115,7 +131,9 @@ export type ScanNarrativeFacts = {
         };
     }>;
     mergePosture: MergePosture | null;
+    /** @deprecated Use `riskSignals.riskIndex` — kept for frozen surface presenters. */
     riskIndex: number | null;
+    riskSignals: RiskSignals | null;
 };
 export declare const EMPTY_SCAN_NARRATIVE_FACTS: ScanNarrativeFacts;
 /** Derivation caps — presenters apply tighter channel limits. */

package/dist/scanNarrativeFacts.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"scanNarrativeFacts.d.ts","sourceRoot":"","sources":["../src/scanNarrativeFacts.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,6BAA6B,CAAC;AAC3E,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAExD,MAAM,MAAM,yBAAyB,GACjC,iBAAiB,GACjB,UAAU,GACV,gBAAgB,GAChB,cAAc,CAAC;AAEnB,MAAM,MAAM,kBAAkB,GAAG,SAAS,GAAG,OAAO,GAAG,MAAM,GAAG,SAAS,CAAC;AAE1E,MAAM,MAAM,gBAAgB,GACxB,kBAAkB,GAClB,YAAY,GACZ,WAAW,GACX,aAAa,GACb,SAAS,CAAC;AAEd,MAAM,MAAM,gBAAgB,GAAG,QAAQ,GAAG,UAAU,GAAG,MAAM,CAAC;AAE9D,MAAM,MAAM,oBAAoB,GAAG,SAAS,GAAG,SAAS,GAAG,gBAAgB,CAAC;AAE5E,MAAM,MAAM,qBAAqB,GAAG,SAAS,GAAG,KAAK,GAAG,SAAS,CAAC;AAElE,MAAM,MAAM,uBAAuB,GAAG,eAAe,GAAG,SAAS,GAAG,SAAS,CAAC;AAE9E,MAAM,MAAM,qBAAqB,GAAG;IAClC,WAAW,EAAE,MAAM,CAAC;IACpB,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,aAAa,EAAE,MAAM,EAAE,CAAC;IACxB,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,KAAK,EAAE,MAAM,EAAE,CAAC;CACjB,CAAC;AAEF,MAAM,MAAM,2BAA2B,GACnC,IAAI,GACJ,SAAS,GACT,QAAQ,GACR,WAAW,CAAC;AAEhB,MAAM,MAAM,sBAAsB,GAC9B,SAAS,GACT,SAAS,GACT,MAAM,GACN,MAAM,GACN,QAAQ,GACR,OAAO,GACP,IAAI,GACJ,SAAS,CAAC;AAEd,MAAM,MAAM,eAAe,GACvB,aAAa,GACb,UAAU,GACV,SAAS,GACT,QAAQ,GACR,WAAW,GACX,aAAa,GACb,gBAAgB,GAChB,MAAM,GACN,OAAO,GACP,KAAK,GACL,SAAS,CAAC;AAEd,MAAM,MAAM,oBAAoB,GAC5B,MAAM,GACN,UAAU,GACV,WAAW,GACX,SAAS,CAAC;AAEd,MAAM,MAAM,qBAAqB,GAC7B,SAAS,GACT,YAAY,GACZ,WAAW,GACX,WAAW,GACX,kBAAkB,GAClB,SAAS,CAAC;AAEd,MAAM,MAAM,uBAAuB,GAAG,MAAM,GAAG,QAAQ,GAAG,KAAK,CAAC;AAEhE,2EAA2E;AAC3E,MAAM,MAAM,uBAAuB,GAAG;IACpC,WAAW,EAAE,MAAM,CAAC;IACpB,eAAe,EAAE,sBAAsB,GAAG,IAAI,CAAC;IAC/C,WAAW,EAAE,eAAe,GAAG,IAAI,CAAC;IACpC,aAAa,EAAE,oBAAoB,GAAG,IAAI,CAAC;IAC3C,cAAc,EAAE,qBAAqB,GAAG,IAAI,CAAC;IAC7C,wBAAwB,EAAE,OAAO,CAAC;IAClC,gBAAgB,EAAE,uBAAuB,GAAG,IAAI,CAAC;IACjD,iBAAiB,EAAE,MAAM,EAAE,CAAC;IAC5B,cAAc,EAAE,MAAM,CAAC;IACvB,cAAc,EAAE,MAAM,CAAC;CACxB,CAAC;AAEF,MAAM,MAAM,uBAAuB,GAAG;IACpC,eAAe,EAAE,sBAAsB,GAAG,IAAI,CAAC;IAC/C,WAAW,EAAE,eAAe,GAAG,IAAI,CAAC;IACpC,aAAa,EAAE,oBAAoB,GAAG,IAAI,CAAC;IAC3C,cAAc,EAAE,qBAAqB,GAAG,IAAI,CAAC;IAC7C,wBAAwB,EAAE,OAAO,CAAC;IAClC,gBAAgB,EAAE,uBAAuB,GAAG,IAAI,CAAC;IACjD,iBAAiB,EAAE,MAAM,EAAE,CAAC;CAC7B,CAAC;AAEF,MAAM,MAAM,kBAAkB,GAAG;IAC/B,YAAY,EAAE;QACZ,IAAI,EAAE,yBAAyB,CAAC;QAChC,yBAAyB,EAAE,OAAO,CAAC;QACnC,YAAY,EAAE;YAAE,KAAK,EAAE,OAAO,CAAC;YAAC,KAAK,EAAE,OAAO,CAAC;YAAC,KAAK,EAAE,OAAO,CAAA;SAAE,CAAC;QACjE,qBAAqB,EAAE,2BAA2B,CAAC;KACpD,CAAC;IAEF,eAAe,EAAE;QACf,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;QACvB,MAAM,EAAE,MAAM,EAAE,CAAC;QACjB,GAAG,EAAE,MAAM,EAAE,CAAC;KACf,CAAC;IAEF,YAAY,EAAE,qBAAqB,EAAE,CAAC;IAEtC,UAAU,EAAE,MAAM,EAAE,CAAC;IAErB,cAAc,EAAE;QACd,IAAI,EAAE,kBAAkB,CAAC;QACzB,QAAQ,EAAE;YAAE,QAAQ,EAAE,MAAM,EAAE,CAAC;YAAC,KAAK,EAAE,MAAM,EAAE,CAAA;SAAE,CAAC;KACnD,GAAG,IAAI,CAAC;IAET,YAAY,EAAE;QACZ,IAAI,EAAE,gBAAgB,CAAC;QACvB,QAAQ,EAAE;YAAE,KAAK,EAAE,MAAM,EAAE,CAAC;YAAC,UAAU,EAAE,MAAM,EAAE,CAAA;SAAE,CAAC;KACrD,GAAG,IAAI,CAAC;IAET,iEAAiE;IACjE,gBAAgB,EAAE,uBAAuB,GAAG,IAAI,CAAC;IAEjD,+EAA+E;IAC/E,uBAAuB,EAAE,uBAAuB,EAAE,CAAC;IAEnD,WAAW,EAAE;QACX,KAAK,EAAE,gBAAgB,CAAC;QACxB,mBAAmB,CAAC,EAAE,MAAM,CAAC;QAC7B,OAAO,EAAE,MAAM,EAAE,CAAC;KACnB,GAAG,IAAI,CAAC;IAET,aAAa,EAAE,KAAK,CAAC;QACnB,EAAE,EAAE,MAAM,CAAC;QACX,KAAK,EAAE,MAAM,CAAC;KACf,CAAC,CAAC;IAEH,QAAQ,EAAE,KAAK,CAAC;QACd,WAAW,EAAE,MAAM,CAAC;QACpB,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC;QACzB,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,KAAK,EAAE,MAAM,EAAE,CAAC;KACjB,CAAC,CAAC;IAEH,gBAAgB,EAAE,KAAK,CAAC;QACtB,IAAI,EAAE,oBAAoB,CAAC;QAC3B,EAAE,EAAE,MAAM,CAAC;QACX,KAAK,EAAE,qBAAqB,CAAC;QAC7B,QAAQ,EAAE,MAAM,CAAC;QACjB,OAAO,EAAE,MAAM,CAAC;QAChB,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,aAAa,CAAC,EAAE,MAAM,EAAE,CAAC;KAC1B,CAAC,CAAC;IAEH,UAAU,EAAE;QACV,QAAQ,EAAE,KAAK,GAAG,QAAQ,GAAG,MAAM,GAAG,IAAI,CAAC;KAC5C,CAAC;IAEF,iBAAiB,EAAE,KAAK,CAAC;QACvB,MAAM,EAAE,uBAAuB,CAAC;QAChC,MAAM,EAAE,uBAAuB,CAAC;QAChC,IAAI,CAAC,EAAE;YAAE,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;YAAC,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;SAAE,CAAC;KACrE,CAAC,CAAC;IAEH,YAAY,EAAE,YAAY,GAAG,IAAI,CAAC;IAClC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;CAC1B,CAAC;AAEF,eAAO,MAAM,0BAA0B,EAAE,kBAsBxC,CAAC;AAEF,iEAAiE;AACjE,eAAO,MAAM,wBAAwB,KAAK,CAAC;AAC3C,eAAO,MAAM,wBAAwB,KAAK,CAAC;AAC3C,eAAO,MAAM,2BAA2B,KAAK,CAAC"}
+{"version":3,"file":"scanNarrativeFacts.d.ts","sourceRoot":"","sources":["../src/scanNarrativeFacts.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,6BAA6B,CAAC;AAC3E,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACxD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AACpD,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,YAAY,CAAC;AAEzD,MAAM,MAAM,yBAAyB,GACjC,iBAAiB,GACjB,UAAU,GACV,gBAAgB,GAChB,cAAc,CAAC;AAEnB,MAAM,MAAM,kBAAkB,GAAG,SAAS,GAAG,OAAO,GAAG,MAAM,GAAG,SAAS,CAAC;AAE1E,MAAM,MAAM,gBAAgB,GACxB,kBAAkB,GAClB,YAAY,GACZ,WAAW,GACX,aAAa,GACb,SAAS,CAAC;AAEd,MAAM,MAAM,gBAAgB,GAAG,QAAQ,GAAG,UAAU,GAAG,MAAM,CAAC;AAE9D,MAAM,MAAM,oBAAoB,GAAG,SAAS,GAAG,SAAS,GAAG,gBAAgB,CAAC;AAE5E,MAAM,MAAM,qBAAqB,GAAG,SAAS,GAAG,KAAK,GAAG,SAAS,CAAC;AAElE,MAAM,MAAM,uBAAuB,GAAG,eAAe,GAAG,SAAS,GAAG,SAAS,CAAC;AAE9E,MAAM,MAAM,qBAAqB,GAAG;IAClC,WAAW,EAAE,MAAM,CAAC;IACpB,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,aAAa,EAAE,MAAM,EAAE,CAAC;IACxB,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,KAAK,EAAE,MAAM,EAAE,CAAC;CACjB,CAAC;AAEF,MAAM,MAAM,2BAA2B,GACnC,IAAI,GACJ,SAAS,GACT,QAAQ,GACR,WAAW,CAAC;AAEhB,MAAM,MAAM,sBAAsB,GAC9B,SAAS,GACT,SAAS,GACT,MAAM,GACN,MAAM,GACN,QAAQ,GACR,OAAO,GACP,IAAI,GACJ,SAAS,CAAC;AAEd,MAAM,MAAM,eAAe,GACvB,aAAa,GACb,UAAU,GACV,SAAS,GACT,QAAQ,GACR,WAAW,GACX,aAAa,GACb,gBAAgB,GAChB,MAAM,GACN,OAAO,GACP,KAAK,GACL,SAAS,CAAC;AAEd,MAAM,MAAM,oBAAoB,GAC5B,MAAM,GACN,UAAU,GACV,WAAW,GACX,SAAS,CAAC;AAEd,MAAM,MAAM,qBAAqB,GAC7B,SAAS,GACT,YAAY,GACZ,WAAW,GACX,WAAW,GACX,kBAAkB,GAClB,SAAS,CAAC;AAEd,MAAM,MAAM,uBAAuB,GAAG,MAAM,GAAG,QAAQ,GAAG,KAAK,CAAC;AAEhE,MAAM,MAAM,gBAAgB,GACxB,IAAI,GACJ,sBAAsB,GACtB,2BAA2B,GAC3B,0BAA0B,CAAC;AAE/B,iEAAiE;AACjE,MAAM,MAAM,gBAAgB,GAAG;IAC7B,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,gBAAgB,EAAE,uBAAuB,GAAG,IAAI,CAAC;IACjD,eAAe,EAAE,MAAM,EAAE,CAAC;IAC1B,iBAAiB,EAAE,MAAM,EAAE,CAAC;CAC7B,CAAC;AAEF,MAAM,MAAM,4BAA4B,GAAG;IACzC,QAAQ,EAAE,KAAK,GAAG,QAAQ,GAAG,MAAM,GAAG,IAAI,CAAC;IAC3C,UAAU,EAAE,KAAK,GAAG,QAAQ,GAAG,MAAM,GAAG,IAAI,CAAC;IAC7C,cAAc,EAAE,OAAO,CAAC;CACzB,CAAC;AAEF,2EAA2E;AAC3E,MAAM,MAAM,uBAAuB,GAAG;IACpC,WAAW,EAAE,MAAM,CAAC;IACpB,eAAe,EAAE,sBAAsB,GAAG,IAAI,CAAC;IAC/C,WAAW,EAAE,eAAe,GAAG,IAAI,CAAC;IACpC,aAAa,EAAE,oBAAoB,GAAG,IAAI,CAAC;IAC3C,cAAc,EAAE,qBAAqB,GAAG,IAAI,CAAC;IAC7C,wBAAwB,EAAE,OAAO,CAAC;IAClC,gBAAgB,EAAE,uBAAuB,GAAG,IAAI,CAAC;IACjD,iBAAiB,EAAE,MAAM,EAAE,CAAC;IAC5B,cAAc,EAAE,MAAM,CAAC;IACvB,cAAc,EAAE,MAAM,CAAC;CACxB,CAAC;AAEF,MAAM,MAAM,uBAAuB,GAAG;IACpC,eAAe,EAAE,sBAAsB,GAAG,IAAI,CAAC;IAC/C,WAAW,EAAE,eAAe,GAAG,IAAI,CAAC;IACpC,aAAa,EAAE,oBAAoB,GAAG,IAAI,CAAC;IAC3C,cAAc,EAAE,qBAAqB,GAAG,IAAI,CAAC;IAC7C,wBAAwB,EAAE,OAAO,CAAC;IAClC,gBAAgB,EAAE,uBAAuB,GAAG,IAAI,CAAC;IACjD,iBAAiB,EAAE,MAAM,EAAE,CAAC;CAC7B,CAAC;AAEF,MAAM,MAAM,kBAAkB,GAAG;IAC/B,YAAY,EAAE;QACZ,IAAI,EAAE,yBAAyB,CAAC;QAChC,yBAAyB,EAAE,OAAO,CAAC;QACnC,YAAY,EAAE;YAAE,KAAK,EAAE,OAAO,CAAC;YAAC,KAAK,EAAE,OAAO,CAAC;YAAC,KAAK,EAAE,OAAO,CAAA;SAAE,CAAC;QACjE,qBAAqB,EAAE,2BAA2B,CAAC;QACnD,mBAAmB,EAAE,sBAAsB,EAAE,CAAC;QAC9C,gBAAgB,EAAE,gBAAgB,CAAC;KACpC,CAAC;IAEF,eAAe,EAAE;QACf,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;QACvB,MAAM,EAAE,MAAM,EAAE,CAAC;QACjB,GAAG,EAAE,MAAM,EAAE,CAAC;KACf,CAAC;IAEF,YAAY,EAAE,qBAAqB,EAAE,CAAC;IAEtC,UAAU,EAAE,MAAM,EAAE,CAAC;IAErB,cAAc,EAAE;QACd,IAAI,EAAE,kBAAkB,CAAC;QACzB,QAAQ,EAAE;YAAE,QAAQ,EAAE,MAAM,EAAE,CAAC;YAAC,KAAK,EAAE,MAAM,EAAE,CAAA;SAAE,CAAC;KACnD,GAAG,IAAI,CAAC;IAET,YAAY,EAAE;QACZ,IAAI,EAAE,gBAAgB,CAAC;QACvB,QAAQ,EAAE;YAAE,KAAK,EAAE,MAAM,EAAE,CAAC;YAAC,UAAU,EAAE,MAAM,EAAE,CAAA;SAAE,CAAC;KACrD,GAAG,IAAI,CAAC;IAET,iEAAiE;IACjE,gBAAgB,EAAE,uBAAuB,GAAG,IAAI,CAAC;IAEjD,+EAA+E;IAC/E,uBAAuB,EAAE,uBAAuB,EAAE,CAAC;IAEnD,WAAW,EAAE;QACX,KAAK,EAAE,gBAAgB,CAAC;QACxB,mBAAmB,CAAC,EAAE,MAAM,CAAC;QAC7B,OAAO,EAAE,MAAM,EAAE,CAAC;KACnB,GAAG,IAAI,CAAC;IAET,aAAa,EAAE,gBAAgB,EAAE,CAAC;IAElC,QAAQ,EAAE,KAAK,CAAC;QACd,WAAW,EAAE,MAAM,CAAC;QACpB,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC;QACzB,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,KAAK,EAAE,MAAM,EAAE,CAAC;KACjB,CAAC,CAAC;IAEH,gBAAgB,EAAE,KAAK,CAAC;QACtB,IAAI,EAAE,oBAAoB,CAAC;QAC3B,EAAE,EAAE,MAAM,CAAC;QACX,KAAK,EAAE,qBAAqB,CAAC;QAC7B,QAAQ,EAAE,MAAM,CAAC;QACjB,OAAO,EAAE,MAAM,CAAC;QAChB,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,aAAa,CAAC,EAAE,MAAM,EAAE,CAAC;KAC1B,CAAC,CAAC;IAEH,UAAU,EAAE,4BAA4B,CAAC;IAEzC,iBAAiB,EAAE,KAAK,CAAC;QACvB,MAAM,EAAE,uBAAuB,CAAC;QAChC,MAAM,EAAE,uBAAuB,CAAC;QAChC,IAAI,CAAC,EAAE;YAAE,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;YAAC,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;SAAE,CAAC;KACrE,CAAC,CAAC;IAEH,YAAY,EAAE,YAAY,GAAG,IAAI,CAAC;IAClC,oFAAoF;IACpF,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,WAAW,EAAE,WAAW,GAAG,IAAI,CAAC;CACjC,CAAC;AAEF,eAAO,MAAM,0BAA0B,EAAE,kBAyBxC,CAAC;AAEF,iEAAiE;AACjE,eAAO,MAAM,wBAAwB,KAAK,CAAC;AAC3C,eAAO,MAAM,wBAAwB,KAAK,CAAC;AAC3C,eAAO,MAAM,2BAA2B,KAAK,CAAC"}

package/dist/scanNarrativeFacts.js

@@ -4,6 +4,8 @@ export const EMPTY_SCAN_NARRATIVE_FACTS = {
         codeIntelligenceAvailable: false,
         tiersPresent: { tier1: false, tier2: false, tier3: false },
         repoIntelligenceParse: "absent",
+        preparationWarnings: [],
+        corpusGateReason: "repo_intelligence_absent",
     },
     changedPackages: { primary: null, others: [], all: [] },
     packageUsage: [],
@@ -16,10 +18,11 @@ export const EMPTY_SCAN_NARRATIVE_FACTS = {
     affectedAreas: [],
     hotspots: [],
     reviewerGuidance: [],
-    confidence: { decision: null },
+    confidence: { decision: null, assessment: null, limitedContext: false },
     repositoryContext: [],
     mergePosture: null,
     riskIndex: null,
+    riskSignals: null,
 };
 /** Derivation caps — presenters apply tighter channel limits. */
 export const NARRATIVE_FACT_MAX_PATHS = 20;

package/dist/scanPresentationBundle.golden.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=scanPresentationBundle.golden.test.d.ts.map

package/dist/scanPresentationBundle.golden.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"scanPresentationBundle.golden.test.d.ts","sourceRoot":"","sources":["../src/scanPresentationBundle.golden.test.ts"],"names":[],"mappings":""}

package/dist/scanPresentationBundle.golden.test.js

@@ -0,0 +1,78 @@
+import { describe, expect, it } from "vitest";
+import { deriveCardExposureCategory } from "./formatCardExposureDisplay.js";
+import { buildScanPresentationBundle } from "./presentation/orchestration/buildScanPresentationBundle.js";
+import { scanResultBullmq, scanResultEslint, scanResultFastifyRuntime, scanResultLimitedContext, scanResultMixedTypescriptFastify, scanResultPrettier, scanResultTypescriptPatch, scanResultVitest, } from "./presentation/fixtures/presentationPersonaFixtures.js";
+const validationPersonas = [
+    { id: "fastify-runtime", result: scanResultFastifyRuntime },
+    { id: "typescript-patch", result: scanResultTypescriptPatch },
+    { id: "mixed-ts-fastify", result: scanResultMixedTypescriptFastify },
+    { id: "prettier", result: scanResultPrettier },
+    { id: "bullmq", result: scanResultBullmq },
+    { id: "eslint", result: scanResultEslint },
+    { id: "vitest", result: scanResultVitest },
+    { id: "limited-context", result: scanResultLimitedContext },
+];
+function bundleFor(result) {
+    return buildScanPresentationBundle({
+        result,
+        pipelineStatus: "done",
+    });
+}
+describe("scanPresentationBundle golden — proof model", () => {
+    it.each(validationPersonas)("builds bundle for $id", ({ result }) => {
+        const bundle = bundleFor(result);
+        expect(bundle).not.toBeNull();
+        expect(bundle.facts.availability.corpusGateReason).toBeDefined();
+        expect(bundle.facts.confidence).toMatchObject({
+            limitedContext: expect.any(Boolean),
+        });
+        expect(bundle.facts.riskSignals).not.toBeNull();
+        expect(bundle.facts.riskSignals.layers).toHaveLength(4);
+    });
+    it("fastify-runtime — linkage and diagnostics", () => {
+        const bundle = bundleFor(scanResultFastifyRuntime);
+        const { facts } = bundle;
+        expect(facts.availability.corpusGateReason).toBe("ok");
+        expect(facts.confidence.limitedContext).toBe(false);
+        expect(facts.confidence.assessment).toBe("medium");
+        const apiArea = facts.affectedAreas.find((a) => a.id === "api");
+        expect(apiArea?.packages).toContain("fastify");
+        expect(apiArea?.findingIds).toContain("finding-fastify-runtime");
+        expect(apiArea?.paths.length).toBeGreaterThan(0);
+        expect(apiArea?.hotspotPackages).toContain("fastify");
+        expect(apiArea?.verificationFocus.length).toBeGreaterThan(0);
+        expect(facts.riskSignals?.riskIndex).toBe(55);
+        expect(facts.riskSignals?.exposure).toBe(deriveCardExposureCategory(55));
+        expect(facts.riskIndex).toBe(facts.riskSignals?.riskIndex);
+    });
+    it("limited-context — diagnostics without synthetic confidence", () => {
+        const bundle = bundleFor(scanResultLimitedContext);
+        const { facts } = bundle;
+        expect(facts.availability.corpusGateReason).toBe("no_code_intelligence");
+        expect(facts.availability.preparationWarnings.some((w) => w.code === "base_lockfile_missing")).toBe(true);
+        expect(facts.confidence.assessment).toBe("low");
+        expect(facts.confidence.limitedContext).toBe(true);
+    });
+    it("typescript-patch — tooling semantics with risk signals", () => {
+        const bundle = bundleFor(scanResultTypescriptPatch);
+        const { facts } = bundle;
+        expect(facts.availability.corpusGateReason).toBe("ok");
+        expect(facts.packageSemantics?.dependencyClass).toBe("tooling");
+        expect(facts.riskSignals?.riskIndex).toBe(18);
+        expect(facts.riskSignals?.exposure).toBe(deriveCardExposureCategory(18));
+    });
+    it("affected areas always carry linkage arrays (structure)", () => {
+        for (const { result } of validationPersonas) {
+            const bundle = bundleFor(result);
+            if (!bundle)
+                continue;
+            for (const area of bundle.facts.affectedAreas) {
+                expect(Array.isArray(area.packages)).toBe(true);
+                expect(Array.isArray(area.findingIds)).toBe(true);
+                expect(Array.isArray(area.paths)).toBe(true);
+                expect(Array.isArray(area.hotspotPackages)).toBe(true);
+                expect(Array.isArray(area.verificationFocus)).toBe(true);
+            }
+        }
+    });
+});

package/dist/scanResultSchema.d.ts

@@ -21,8 +21,8 @@ export declare const scanResultSchema: z.ZodObject<{
     methodologyVersion: z.ZodOptional<z.ZodString>;
     confidence: z.ZodOptional<z.ZodEnum<{
         low: "low";
-        medium: "medium";
         high: "high";
+        medium: "medium";
     }>>;
     signals: z.ZodOptional<z.ZodArray<z.ZodUnknown>>;
     contributions: z.ZodOptional<z.ZodArray<z.ZodUnknown>>;
@@ -40,8 +40,8 @@ export declare const scanResultSchema: z.ZodObject<{
         }>;
         confidence: z.ZodOptional<z.ZodEnum<{
             low: "low";
-            medium: "medium";
             high: "high";
+            medium: "medium";
         }>>;
         reasoning: z.ZodOptional<z.ZodArray<z.ZodString>>;
     }, z.core.$loose>>;
@@ -62,8 +62,8 @@ export declare const engineOutputScanResultSchema: z.ZodObject<{
     findings: z.ZodPipe<z.ZodOptional<z.ZodUnion<readonly [z.ZodArray<z.ZodUnknown>, z.ZodNull]>>, z.ZodTransform<unknown[], unknown[] | null | undefined>>;
     confidence: z.ZodOptional<z.ZodEnum<{
         low: "low";
-        medium: "medium";
         high: "high";
+        medium: "medium";
     }>>;
     signals: z.ZodOptional<z.ZodArray<z.ZodUnknown>>;
     contributions: z.ZodOptional<z.ZodArray<z.ZodUnknown>>;
@@ -80,8 +80,8 @@ export declare const engineOutputScanResultSchema: z.ZodObject<{
         }>;
         confidence: z.ZodOptional<z.ZodEnum<{
             low: "low";
-            medium: "medium";
             high: "high";
+            medium: "medium";
         }>>;
         reasoning: z.ZodOptional<z.ZodArray<z.ZodString>>;
     }, z.core.$loose>>;
@@ -89,6 +89,55 @@ export declare const engineOutputScanResultSchema: z.ZodObject<{
     methodologyVersion: z.ZodString;
     generatedAt: z.ZodString;
     assessment: z.ZodObject<{
+        reviewFocalPoint: z.ZodObject<{
+            episodeShape: z.ZodEnum<{
+                single_anchor: "single_anchor";
+                multi_anchor: "multi_anchor";
+                parent_supporting: "parent_supporting";
+                coupled_pair: "coupled_pair";
+                tooling_bundle: "tooling_bundle";
+                structural: "structural";
+            }>;
+            anchors: z.ZodArray<z.ZodString>;
+            supportingPackages: z.ZodOptional<z.ZodArray<z.ZodString>>;
+            election: z.ZodObject<{
+                grounding: z.ZodArray<z.ZodObject<{
+                    packageName: z.ZodString;
+                    reason: z.ZodString;
+                    decidedBy: z.ZodEnum<{
+                        concern: "concern";
+                        reach: "reach";
+                        changeSeverity: "changeSeverity";
+                        role_salience_tiebreak: "role_salience_tiebreak";
+                    }>;
+                    evidenceRefs: z.ZodArray<z.ZodString>;
+                }, z.core.$strip>>;
+                exclusions: z.ZodArray<z.ZodObject<{
+                    packageName: z.ZodString;
+                    reason: z.ZodString;
+                    lostOn: z.ZodEnum<{
+                        concern: "concern";
+                        reach: "reach";
+                        changeSeverity: "changeSeverity";
+                        role_salience_tiebreak: "role_salience_tiebreak";
+                    }>;
+                    evidenceRefs: z.ZodArray<z.ZodString>;
+                }, z.core.$strip>>;
+            }, z.core.$strip>;
+        }, z.core.$strip>;
+        reachScope: z.ZodObject<{
+            packages: z.ZodArray<z.ZodString>;
+            maxBucket: z.ZodEnum<{
+                low: "low";
+                high: "high";
+                very_low: "very_low";
+                moderate: "moderate";
+            }>;
+        }, z.core.$strip>;
+        verificationScope: z.ZodObject<{
+            packages: z.ZodArray<z.ZodString>;
+            focus: z.ZodArray<z.ZodString>;
+        }, z.core.$strip>;
         posture: z.ZodEnum<{
             safe: "safe";
             needs_review: "needs_review";

package/dist/scanResultSchema.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"scanResultSchema.d.ts","sourceRoot":"","sources":["../src/scanResultSchema.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,KAAK,EAAE,uBAAuB,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAEtE,wGAAwG;AACxG,eAAO,MAAM,eAAe,EAAG,GAAY,CAAC;AAE5C,+EAA+E;AAC/E,eAAO,MAAM,sBAAsB,EAAG,GAAY,CAAC;AASnD;;;;GAIG;AACH,eAAO,MAAM,gBAAgB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBA4Bb,CAAC;AAUjB;;;GAGG;AACH,eAAO,MAAM,4BAA4B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAIvC,CAAC;AAEH,MAAM,MAAM,kCAAkC,GAAG;IAC/C,EAAE,EAAE,KAAK,CAAC;IACV,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,EAAE,CAAC;CAClB,CAAC;AAEF,MAAM,MAAM,kCAAkC,GAAG;IAC/C,EAAE,EAAE,IAAI,CAAC;IACT,MAAM,EAAE,uBAAuB,CAAC;CACjC,CAAC;AAEF,wBAAgB,+BAA+B,CAC7C,IAAI,EAAE,OAAO,GACZ,kCAAkC,GAAG,kCAAkC,CAazE;AAED,uFAAuF;AACvF,wBAAgB,kCAAkC,CAChD,IAAI,EAAE,OAAO,GACZ,uBAAuB,CAMzB;AAED,MAAM,MAAM,sBAAsB,GAAG;IACnC,EAAE,EAAE,KAAK,CAAC;IACV,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,EAAE,CAAC;CAClB,CAAC;AAEF,MAAM,MAAM,sBAAsB,GAAG;IACnC,EAAE,EAAE,IAAI,CAAC;IACT,MAAM,EAAE,UAAU,CAAC;CACpB,CAAC;AAEF,wBAAgB,mBAAmB,CACjC,IAAI,EAAE,OAAO,GACZ,sBAAsB,GAAG,sBAAsB,CAajD;AAED,yEAAyE;AACzE,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,OAAO,GAAG,UAAU,CAMhE"}
+{"version":3,"file":"scanResultSchema.d.ts","sourceRoot":"","sources":["../src/scanResultSchema.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,KAAK,EAAE,uBAAuB,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAEtE,wGAAwG;AACxG,eAAO,MAAM,eAAe,EAAG,GAAY,CAAC;AAE5C,+EAA+E;AAC/E,eAAO,MAAM,sBAAsB,EAAG,GAAY,CAAC;AASnD;;;;GAIG;AACH,eAAO,MAAM,gBAAgB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBA4Bb,CAAC;AAUjB;;;GAGG;AACH,eAAO,MAAM,4BAA4B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAIvC,CAAC;AAEH,MAAM,MAAM,kCAAkC,GAAG;IAC/C,EAAE,EAAE,KAAK,CAAC;IACV,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,EAAE,CAAC;CAClB,CAAC;AAEF,MAAM,MAAM,kCAAkC,GAAG;IAC/C,EAAE,EAAE,IAAI,CAAC;IACT,MAAM,EAAE,uBAAuB,CAAC;CACjC,CAAC;AAEF,wBAAgB,+BAA+B,CAC7C,IAAI,EAAE,OAAO,GACZ,kCAAkC,GAAG,kCAAkC,CAazE;AAED,uFAAuF;AACvF,wBAAgB,kCAAkC,CAChD,IAAI,EAAE,OAAO,GACZ,uBAAuB,CAMzB;AAED,MAAM,MAAM,sBAAsB,GAAG;IACnC,EAAE,EAAE,KAAK,CAAC;IACV,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,EAAE,CAAC;CAClB,CAAC;AAEF,MAAM,MAAM,sBAAsB,GAAG;IACnC,EAAE,EAAE,IAAI,CAAC;IACT,MAAM,EAAE,UAAU,CAAC;CACpB,CAAC;AAEF,wBAAgB,mBAAmB,CACjC,IAAI,EAAE,OAAO,GACZ,sBAAsB,GAAG,sBAAsB,CAajD;AAED,yEAAyE;AACzE,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,OAAO,GAAG,UAAU,CAMhE"}

package/dist/scanResultSchema.js

@@ -1,5 +1,5 @@
+import { assessmentSchema } from "@mergesignal/contracts";
 import { z } from "zod";
-import { assessmentSchema } from "./assessmentSchema.js";
 /** Bump when persisted `result` JSON validation rules change materially (relaxed / legacy-tolerant). */
 export const SCAN_RESULT_ABI = "2";
 /** Bump when strict fresh-engine-output validation rules change materially. */

package/dist/scanResultSchema.test.js

@@ -1,5 +1,6 @@
 import { describe, it, expect } from "vitest";
 import { safeParseScanResult, parseScanResultOrThrow, scanResultSchema, safeParseEngineOutputScanResult, parseEngineOutputScanResultOrThrow, } from "./scanResultSchema.js";
+import { emptyReachScope, emptyVerificationScope, minimalReviewFocalPoint, } from "./fixtures/assessmentScopeFixtures.js";
 const minimalValid = {
     totalScore: 42,
     layerScores: {
@@ -78,6 +79,9 @@ describe("scanResultSchema", () => {
     });
 });
 const minimalAssessment = {
+    reviewFocalPoint: minimalReviewFocalPoint(["typescript"]),
+    reachScope: emptyReachScope(),
+    verificationScope: emptyVerificationScope(),
     posture: "safe",
     confidence: "high",
     primaryConcern: null,
@@ -118,4 +122,26 @@ describe("engineOutputScanResultSchema (strict, fresh engine only)", () => {
         });
         expect(r.ok).toBe(false);
     });
+    it("rejects ABI-1 assessment missing focal/scope fields on fresh engine path", () => {
+        const legacyAssessment = {
+            posture: "safe",
+            confidence: "high",
+            primaryConcern: null,
+            concerns: [],
+            factors: ["tooling_maintenance"],
+            changeClasses: ["tooling_maintenance"],
+            presentation: {
+                narrativeIntensity: "minimal",
+                reachVisibility: "hidden",
+                verificationIntensity: "advisory",
+                insightEmissionFloor: "none",
+                reportMode: "high_signal_pr",
+            },
+        };
+        const r = safeParseEngineOutputScanResult({
+            ...withMethodology,
+            assessment: legacyAssessment,
+        });
+        expect(r.ok).toBe(false);
+    });
 });

package/dist/types.d.ts

@@ -1,4 +1,4 @@
-import type { Assessment } from "./assessmentSchema.js";
+import type { Assessment } from "@mergesignal/contracts";
 export type LayerScores = {
     security: number;
     maintainability: number;